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Question: 1 


DRAG DROP 
Put the following features in the order they are applied. 


McAfee anti-malware scanning fF 


Answer: 


Protocol check 


URL Filters 


Web Reputation Filters 


McAfee anti-malware scanning 


Explanation: 
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(1) — Protocol check 

(2) — URL Filters 

(3) — Web Reputation Filters 

(4) — Mcafee anti-malware scanning 


Question: 2 


Why does L4TM require T1 to be in promiscuous mode? 


A. To transmit TCP reset packets 

B. To process traffic that is not intended for its MAC address 
C. To receive Ethernet broadcasts 

D. To bind with other promiscuous mode ports 


Answer: B 


Question: 3 


Which action does Dynamic Content Analysis enable the Web Security Appliance to do? 


A. Reclassify miscategorized sites. 

B. Determine the most likely category of the website delivering content. 
C. Block web content based on the Web Reputation of the serving site. 
D. Choose the best AV engine to scan content. 

E. Redirect the user to a site that the security administrator chooses. 


Answer: B 


Explanation: 
http://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet_C78- 
718442 


Question: 4 


In the access log, what does an ACL tag beginning with BLOCK_ADMIN indicate? 


A. The transaction was blocked because of application or object properties. 
B. The malware category is set to blocking mode. 

C. The transaction was manually blocked by the administrative user. 

D. The destination was manually added to the block list. 


Answer: C 


https://www.certkillers.net 


Questions & Answers PDF Page 4 


Question: 5 


You are helping the customer configure authentication. A new AsyncOS upgrade becomes available; 
what should you do? 


A. Avoid mentioning the upgrade to the customer. 

B. Immediately show the customer how to run the CLI command upgrade. 

C. Contact customer support and ask them to run the upgrade for you. 

D. Schedule a convenient time to upgrade again, backing up the configuration before and after the 
upgrade. 


Answer: D 
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